Privacy Policy

The data controller responsible for your information is:

CertiVerse
Email: polskiprogo@gmail.com

We collect the following types of information:

a. Personal Data Provided by You:

• Account Information: When you create an account, we collect your name, email address, username, and password.
• Log-in through Third-Party Services: If you choose to register or log in using Google Sign-In or Facebook Login, we will receive personal data from these services, such as your name and email address, based on your privacy settings on those services and permissions you grant.

b. Usage Data (Collected Automatically):

• Information about your activity within the Application, such as lessons completed, progress, and interactions with features. This data is used to create your learning dashboard and suggest topics.

c. Technical Data (Collected Automatically Through Third-Party Services):

• Device and Connection Information: We, through our third-party service providers (see Section 7), may collect information about your device, such as device model, operating system version, IP address (which may be used to determine general location), unique device identifiers, language settings, and mobile network information.
• Crash Reports and Analytics: To improve app stability and understand usage patterns, we use services like Firebase Crashlytics, Firebase Events (Google Analytics for Firebase), and Sentry. These services automatically collect data related to app usage, performance, and crashes. This may include device state information, error logs, and user interaction events.

We use the collected information for the following purposes:

• To create and manage your account.
• To provide, operate, and maintain the functionality of the Application.
• To track your learning progress and provide personalized learning suggestions and user dashboard.
• To improve the Application, including monitoring and analyzing usage, fixing bugs, and developing new features.
• To ensure the security and stability of the Application.
• To communicate with you, including sending important notices regarding your account or changes to our services or policies (as described in Section 13).
• To comply with legal obligations.

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information is as follows:

• Performance of a Contract: The processing of your account information and usage data is necessary to provide the services you requested by creating an account and using the Application (per our Terms of Service).
• Legitimate Interests: We process certain data (e.g., for analytics and crash reporting) based on our legitimate interests in understanding how our Application is used, improving our services, and ensuring security, provided these interests are not overridden by your data protection rights.
• Consent: When you use Google Sign-In or Facebook Login, you consent to us receiving information from these platforms. You may also consent to other specific processing activities. You can withdraw your consent at any time, as described in Section 10.

We do not sell your personal data. We share your information only in the following circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf, such as cloud hosting, analytics, error tracking, and customer support. These include:
  • Google (for Firebase services such as Crashlytics, Events/Analytics, and Google Sign-In)
  • Meta (for Facebook Login)
  • Sentry (for error tracking)
  These providers are bound by confidentiality obligations and are authorized to use your personal information only as necessary to provide services to us.
• Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:
  • Comply with a legal obligation.
  • Protect and defend our rights or property.
  • Prevent or investigate possible wrongdoing in connection with the Application.
  • Protect the personal safety of users of the Application or the public.
  • Protect against legal liability.

Our Application uses the following third-party services that may collect information:

• Google Sign-In & Firebase (Google Analytics for Firebase, Crashlytics): These services help with authentication, provide analytics, and track crashes. You can view Google's Privacy Policy here: https://policies.google.com/privacy
• Facebook Login: This service helps with authentication. You can view Facebook's Privacy Policy here: https://www.facebook.com/privacy/policy/
• Sentry: This service helps with error tracking. You can view Sentry's Privacy Policy here: https://sentry.io/privacy/

We encourage you to review the privacy policies of these third-party services. We are not responsible for the data practices of these third parties.

We retain your personal data for as long as your account is active or as needed to provide you with our services.

If you delete your account, we will delete the personal data associated with it, subject to any legal obligations to retain data for a longer period or for backup/archival purposes within a reasonable timeframe.

Please note that deleting the Application from your device does not automatically delete your account and associated data from our servers. You must delete your account through the Application (if this feature is available) or by contacting us at polskiprogo@gmail.com.

If you are a user in the EEA, you have the following rights regarding your personal data:

• Right of Access: You can request access to the personal data we hold about you by contacting us at polskiprogo@gmail.com.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data. The primary way to do this is by deleting your account. You can request account deletion by contacting us at polskiprogo@gmail.com.
• Right to Restrict Processing: You can request that we restrict the processing of your personal data under certain conditions.
• Right to Data Portability: You can request to receive a copy of the personal data we hold about you in a structured, commonly used, and machine-readable format by contacting us.
• Right to Object: You have the right to object to our processing of your personal data when it is based on our legitimate interests.
• Right to Withdraw Consent: If we process your data based on your consent (e.g., for third-party log-in), you can withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. The Polish supervisory authority is the Prezes Urzędu Ochrony Danych Osobowych (UODO). Website: https://uodo.gov.pl/

To exercise any of these rights (except for lodging a complaint directly with UODO), please contact us at polskiprogo@gmail.com. If you choose not to create an account or delete your account, some features of the Application may be unavailable to you.

If you have any questions about this Privacy Policy, please contact us:

CertiVerse
Email: polskiprogo@gmail.com
Address: Łódź, Poland